TLDR
it CAN see IP address, last block synced, and potentially manipulate your decoys (reducing your sender privacy)
it CAN'T see amounts, receiver addresses, balances, and transaction history
If you don't run your own node there are practical things you can do to reduce/eliminate what little malicious nodes can see be using TOR/VPN + changing the remote nodes you use for every transaction or at least periodically switching them. But of course the best privacy is always to use your own node.
"potentially manipulate your decoys" part will soon be remedied and be one less thing it can see when Monero upgrades to FCMP
Good resource on what a malicious Monero node can and cant see:
https://localmonero.co/knowledge/remote-nodes-privacy
SaberhagenTheNameless / Saberhagen The Nameless
npub14a…yz6rn
2025-01-26 11:41:41
in reply to nevent1q…ghqe
Author Public Key
npub14a6q6xvt4wuv0wpdpfr336e4fweldtu6np3ehpw55h83xuw2h2zsgyz6rnPublished at
2025-01-26 11:41:41Event JSON
{
"id": "dbe836b2587eaa6638510431dde88fe95e2443eb4a7795393d6df050284c111d",
"pubkey": "af740d198babb8c7b82d0a4718eb354bb3f6af9a98639b85d4a5cf1371caba85",
"created_at": 1737891701,
"kind": 1,
"tags": [
[
"e",
"b684c778688b587de36244cae7d8af416843edcfaad2bdaa96caaeb486dbe2c8",
"",
"root"
],
[
"e",
"02d7d3157344a3b4e21a759d59e51e51bc8e3db4b778de4aee29e10ddfaa1dac",
"nostr-idb://cache-relay",
"reply",
"535a8eb6063eb4a1068909d25012671dd5c37d1ff80561384b75c925fd4d47ee"
],
[
"p",
"2183e94758481d0f124fbd93c56ccaa45e7e545ceeb8d52848f98253f497b975"
],
[
"p",
"da26e54b86c9a395a4233cbb540fe2aa93cdad4a9b657ed5a724efed5859d23d"
],
[
"p",
"f985d309197c805e1719c73185b574fc3ee407d7c1b6157dee99c6ace2599bbb"
],
[
"p",
"ffbb1c5748f93fe48768b493b4117b6a4776de34a2ae78dfb373fe8794510560"
],
[
"p",
"535a8eb6063eb4a1068909d25012671dd5c37d1ff80561384b75c925fd4d47ee"
]
],
"content": "TLDR \nit CAN see IP address, last block synced, and potentially manipulate your decoys (reducing your sender privacy)\nit CAN'T see amounts, receiver addresses, balances, and transaction history\n\nIf you don't run your own node there are practical things you can do to reduce/eliminate what little malicious nodes can see be using TOR/VPN + changing the remote nodes you use for every transaction or at least periodically switching them. But of course the best privacy is always to use your own node.\n\n\"potentially manipulate your decoys\" part will soon be remedied and be one less thing it can see when Monero upgrades to FCMP\n\nGood resource on what a malicious Monero node can and cant see:\nhttps://localmonero.co/knowledge/remote-nodes-privacy",
"sig": "5ccc19c8efa82be343f53a6b285b188f81bda938d0393fcb2e79c57517df96cee1d18af71a277aa86f9e2b5c4f7e5a14ba35b8b3fe8c244793ae8a02f435bf76"
}